Microsoft has a lot of tools to confirm and verify how the AD is operating. I'm suprised other issues have not popped up if there really that far out of sync.